Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: j8WdPvfjtC/IpCrLB9Drb7pBloPnL9xd0KVZ9R8bIDs=
Subject key identifier: 26:F7:B7:D4:01:F9:BD:28:4B:86:7B:7B:0F:65:BE:51:B2:7D:EC:EF
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 01A1765E25A01635D15EAC9AC2F27172A333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0EC1
Signing time: Mon 26 Oct 2026 04:00:43 +0000
Manifest this update: Mon 26 Oct 2026 04:00:43 +0000
Manifest next update: Tue 27 Oct 2026 04:00:43 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: iUxd8j6CNewyLyWx2f3zlRM247zEJYtkg1hKNcUtYWE=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:25:a0:16:35:d1:5e:ac:9a:c2:f2:71:72:a3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Oct 26 04:00:43 2026 GMT
Not After : Oct 27 04:00:43 2026 GMT
Subject: CN=26f7b7d401f9bd284b867b7b0f65be51b27decef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:4b:18:ff:15:e0:f0:9a:02:e8:de:b0:66:
e7:e6:86:18:b5:e1:35:5b:9c:21:c3:42:8e:02:c7:
1c:77:ac:1f:1f:41:07:71:09:01:48:6e:5f:be:65:
bf:2a:1a:5c:6a:c8:8a:7c:5c:00:f8:0b:09:c1:9f:
8d:ca:d1:77:87:d4:1b:da:c4:2f:f5:06:41:da:d5:
2d:7c:e1:47:54:3c:ee:5f:3b:7f:51:61:07:2c:47:
da:9d:c7:f6:4b:6a:e4:f2:03:67:b3:64:bf:d2:b1:
28:53:ee:a6:ec:62:d7:9a:b8:13:aa:ad:f5:56:b7:
bc:73:d5:8f:83:a0:58:8b:e2:73:e1:16:d9:bd:66:
83:36:f2:ee:06:71:5b:e3:57:6a:32:b8:32:fc:59:
f9:a6:38:b6:34:41:0e:4d:05:bb:15:14:c2:9b:22:
51:f3:73:67:3d:b6:39:5b:81:64:21:83:57:12:34:
ce:b2:ab:72:aa:52:03:83:86:ca:4c:06:50:f3:1a:
1b:14:1c:cf:92:2d:76:9e:61:2a:af:4b:be:ce:4a:
26:b0:37:25:7e:2a:16:43:23:12:67:70:9a:43:10:
d3:5a:17:96:dd:4b:f2:ab:68:24:44:ec:36:fe:1f:
a0:21:e0:e8:15:14:75:4a:64:5f:0d:35:17:e1:ac:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F7:B7:D4:01:F9:BD:28:4B:86:7B:7B:0F:65:BE:51:B2:7D:EC:EF
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f6:28:ec:a1:2d:6e:be:24:3f:5d:43:05:67:9d:e1:7d:07:
f2:06:fa:90:09:b4:4b:4b:97:54:05:95:09:10:d2:c3:b9:4c:
31:80:0f:9e:79:93:6e:9d:41:47:b8:a4:b2:fb:98:98:cd:1e:
99:16:eb:32:e5:00:cb:fc:85:ef:e5:ab:31:a4:33:65:45:e2:
f3:57:9d:dc:88:ab:78:c3:1e:05:67:8d:9c:6f:78:80:0f:95:
e0:b4:a2:70:8a:a0:8f:44:c4:59:b5:44:a5:9c:b4:94:fc:d0:
f9:5c:61:3a:61:f1:61:0e:58:02:81:82:9b:fb:b0:6d:68:e4:
6e:36:cb:a5:ca:bc:f2:cd:8f:fa:d3:83:3b:76:3b:8b:30:f8:
6c:a6:75:96:3b:03:e5:99:c4:e4:ea:93:08:e5:d6:b0:5e:94:
2e:1d:88:d2:5f:d0:56:ca:84:00:0f:26:7f:61:ff:44:b4:0e:
46:00:45:e7:58:29:9c:da:e7:9e:76:ac:f4:67:bb:b2:a3:5e:
29:9f:3b:cb:9d:1f:3e:fe:9a:02:58:03:da:70:04:64:e6:ee:
ab:27:60:3f:38:e3:26:80:5f:c5:78:5c:64:97:34:f6:2c:a2:
7d:93:e2:b4:46:0f:ce:c3:81:fe:2e:b4:1c:65:cc:25:f3:51:
1b:8f:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:10:26 2026 by rpki-client